isci: fix smp response frame overrun

Due to a typo we currently copy way too much when copying over the response data, but since a request is likely backed by a full page allocation we don't corrupt live data. Signed-off-by: Dan Williams <[email protected]>
realfirst · Jul 3, 2011 · 5edc334 · 5edc334
1 parent ff60639
commit 5edc334
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/drivers/scsi/isci/request.c b/drivers/scsi/isci/request.c
@@ -1694,7 +1694,7 @@ scic_sds_io_request_frame_handler(struct scic_sds_request *sci_req,
 								      frame_index,
 								      &smp_resp);
 
-			word_cnt = (sizeof(struct smp_req) - SMP_RESP_HDR_SZ) /
+			word_cnt = (sizeof(struct smp_resp) - SMP_RESP_HDR_SZ) /
 				sizeof(u32);
 
 			sci_swab32_cpy(((u8 *) rsp_hdr) + SMP_RESP_HDR_SZ,